for environments where I install puppet stacks more often, I've a bolt plan that installs puppetserver/db, runs r10k, runs puppet agent, the runs puppet on another VM where it bootstraps foreman (and if I need to, spin up a dedicated gitlab and blabla)